While poking around I found the following at;
http://uribl.com/index.shtmlApril 6, 2015: New TLD Spam
If you are using SpamAssassin, and are currently receiving spam with new TLDs such as .LINK, .SCIENCE, .CRICKET, .NINJA, .XYZ, .CLICK (and others), it is because those URLs are not being checked against URIBL. In order to lookup these URLs, you will need to upgrade your RegistrarBoundaries.pm.
If you are running a recent version of SpamAssassin such as 3.3.2 or 3.4, simply download the RegistrarBoundaries.pm from SpamAssassin SVN and replace the one you currently have installed. Restart spamd (if you run it) for the change to take effect.
----------------------------------------
please use at your own risk, don't assume I know what I am doing, here's what I have done;
Check current spamassasin version and locate RegistrarBoundaries.pm
spamassassin -V
locate RegistrarBoundaries.pm
SME9; Change to correct folder and check current file;
cd /usr/share/perl5/vendor_perl/Mail/SpamAssassin/Util
ls -al
SME8;
cd /usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/Util/
ls -al
Rename old file, fetch new, set permissions, update spamassassin, check file permissions, size, and name;
mv RegistrarBoundaries.pm RegistrarBoundaries.old
wget
http://svn.apache.org/repos/asf/spamassassin/trunk/lib/Mail/SpamAssassin/Util/RegistrarBoundaries.pmchmod 0444 RegistrarBoundaries.pm
signal-event email-update
ls -al